TwoLevelRoleCompositionCertification

[ashishpatel37]

<Workflow name="TwoLevelRoleCompositionCertification" type="RoleCertification">
<description>
Two-level certification process for role composition, involving primary and secondary certifiers.
</description>

<!-- Variables -->
<variable name="campaignId" type="String"/>
<variable name="primaryCertifiers" type="List"/>
<variable name="secondaryCertifiers" type="List"/>
<variable name="certificationItems" type="List"/>

<!-- Start Step -->
<step name="StartCertification" type="start">
<inputs>
<arg name="campaignId" value="$campaignId"/>
</inputs>
<returns>
<arg name="primaryCertifiers" value="$primaryCertifiers"/>
</returns>
<transitions>
<transition name="toPrimaryCertifierReview" to="PrimaryCertifierReview"/>
</transitions>
</step>

<!-- Primary Certifier Review Step -->
<step name="PrimaryCertifierReview">
<assignment>
<dynamicAssignee>
<identity>
<id>$primaryCertifiers</id>
</identity>
</dynamicAssignee>
</assignment>
<notification>
<templateRef>certification/PrimaryCertifierNotification</templateRef>
</notification>
<task>
<certification>
<action>review</action>
<campaignId>$campaignId</campaignId>
</certification>
</task>
<returns>
<arg name="certificationItems" value="$certificationItems"/>
</returns>
<transitions>
<transition name="toSecondaryCertifierReview" to="SecondaryCertifierReview"/>
</transitions>
</step>

<!-- Secondary Certifier Review Step -->
<step name="SecondaryCertifierReview">
<assignment>
<dynamicAssignee>
<identity>
<id>$secondaryCertifiers</id>
</identity>
</dynamicAssignee>
</assignment>
<notification>
<templateRef>certification/SecondaryCertifierNotification</templateRef>
</notification>
<task>
<certification>
<action>review</action>
<campaignId>$campaignId</campaignId>
</certification>
</task>
<returns>
<arg name="certificationItems" value="$certificationItems"/>
</returns>
<transitions>
<transition name="toCloseCertification" to="CloseCertification"/>
</transitions>
</step>

<!-- Close Certification Step -->
<step name="CloseCertification" type="finish">
<notification>
<templateRef>certification/CertificationCompletedNotification</templateRef>
</notification>
<task>
<certification>
<action>complete</action>
<campaignId>$campaignId</campaignId>
</certification>
</task>
</step>
</Workflow>

 

Notifications Templates

Ensure you have notification templates defined in the certification folder:

• PrimaryCertifierNotification
• SecondaryCertifierNotification
• CertificationCompletedNotification

Testing and Customization

1. Deploy Workflow:

   • Navigate to Setup > Workflow Definitions in SailPoint IdentityIQ.
   • Upload and deploy the XML workflow.

2. Test Workflow:

   • Create a pilot certification campaign using the deployed workflow.
   • Verify the notifications, task assignments, and transitions work as expected.

3. Customize as Needed:

   • Adjust the workflow steps, notifications, and transitions based on specific business requirements and feedback from testing.